15 matches found
CVE-2026-42268: Integer Underflow (Wrap or Wraparound)
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...
libmodsecurity3-3.0.15-1.1 on GA media (moderate)
libmodsecurity3-3.0.15-1.1 on GA media Announcement ID: openSUSE-SU-2026:10732-1 Rating: moderate Cross-References: CVE-2026-30923 CVE-2026-42268 CVSS scores: CVE-2026-30923 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-30923 SUSE : 8.2...
OPENSUSE-SU-2026:10732-1 libmodsecurity3-3.0.15-1.1 on GA media
These are all security issues fixed in the libmodsecurity3-3.0.15-1.1 package on the GA media of openSUSE Tumbleweed...
AZL-85715 CVE-2026-30923 affecting package mod_security 2.9.7-8
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segmentation fault occurs when a rule using the t:hexDecode transformation inspects a query string parameter containing a...
CVE-2026-30923
CVE-2026-30923 affects libModSecurity3 (ModSecurity v3) where a rule using the t:hexDecode transformation can trigger a segmentation fault when inspecting a single-character query string, causing worker process crashes and denial of service. All versions prior to 3.0.15 are affected; the issue is...
CVE-2026-30923: Out-of-bounds Read
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segmentation fault occurs when a rule using the t:hexDecode transformation inspects a query string parameter containing a...
EUVD-2025-5324
Malicious code in bioql PyPI...
OPENSUSE-SU-2025:14946-1 libmodsecurity3-3.0.14-1.1 on GA media
These are all security issues fixed in the libmodsecurity3-3.0.14-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the Libmodsecurity3 network firewall library for protecting web applications with ModSecurity allows attackers to circumvent existing security restrictions.
The vulnerability of the Libmodsecurity3 network firewall library for protecting web applications with ModSecurity is related to incorrect processing of HTML entities during decoding. Exploiting this vulnerability allows an attacker to bypass existing security restrictions by sending HTML entitie...
CVE-2025-27110 Libmodsecurity3 has possible bypass of encoded HTML entities
Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurit...
CVE-2025-27110 Libmodsecurity3 has possible bypass of encoded HTML entities
Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurit...
CVE-2025-27110: Encoding Error
Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. A bug that exists only in Libmodsecurity3 version 3.0.13 means that, in 3.0.13, Libmodsecurit...
OPENSUSE-SU-2024:13732-1 libmodsecurity3-3.0.12-1.1 on GA media
These are all security issues fixed in the libmodsecurity3-3.0.12-1.1 package on the GA media of openSUSE Tumbleweed...